Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa
File:                     ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa (raw, json)
Hash identifier:          I0T+JS7Lhg6t03TYE4zFKPV2nJ615egeve3UVp+svWo=
Subject key identifier:   58:B7:E0:C6:90:18:D6:8D:BA:C5:43:14:A3:45:0E:CE:AA:1B:2F:0C
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584E1E44538DD1EB143C7492EB00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     197715
IP address blocks:        104.156.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:53:8d:d1:eb:14:3c:74:92:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=e2c5fdbc-b226-408a-b392-c0678de4afa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3e:ee:85:8f:1a:17:79:c6:82:92:ae:bc:64:
                    57:ac:08:4d:37:7d:69:fe:98:fd:a6:2e:5d:c5:e3:
                    c5:71:53:8e:81:c9:29:c8:39:07:2d:ff:5c:51:8c:
                    5f:62:92:09:16:03:fc:22:cd:9c:43:7f:d3:76:cf:
                    6c:e4:38:a6:d5:8b:41:52:d2:80:08:8c:e1:5f:cd:
                    0e:24:23:fb:24:a0:25:fc:76:29:ed:80:6d:b7:4e:
                    a1:92:0f:bb:4f:c4:6c:49:91:96:5e:f2:8a:71:f6:
                    85:9a:25:0c:03:e6:1d:0f:63:c1:2f:95:38:44:5e:
                    46:dd:c1:a5:27:4c:0c:72:11:bf:0a:34:3f:72:82:
                    dd:e8:d5:ca:65:37:19:69:39:d1:83:96:a5:e2:e5:
                    c4:23:2e:b5:ea:1d:b8:7e:b5:a4:96:a7:87:5d:6e:
                    e5:60:83:62:a4:de:d0:3a:36:a7:59:62:be:d4:13:
                    f0:e6:3a:28:b6:2f:3f:af:b6:dd:45:34:45:c2:e4:
                    61:2b:0e:b1:54:7b:e1:28:45:e9:aa:6e:16:b5:03:
                    bf:19:28:61:74:35:d7:2e:94:fe:fe:a5:93:c8:7b:
                    71:53:11:4b:a7:19:65:3b:98:31:ac:43:b1:34:fa:
                    0e:dc:ac:62:30:7a:55:64:42:0d:fc:d3:bd:a5:32:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B7:E0:C6:90:18:D6:8D:BA:C5:43:14:A3:45:0E:CE:AA:1B:2F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:59:0b:3c:38:0a:5f:fa:f0:28:98:c1:b8:45:52:d1:2a:56:
         24:0c:ae:35:08:ae:03:96:ec:5f:3d:4a:5d:2c:f9:46:db:0d:
         e9:2b:b8:12:06:8c:75:66:16:01:c5:6f:6f:4e:89:bd:5d:d7:
         11:fa:b9:9a:f8:1a:59:62:1d:d5:8e:62:62:71:a6:ad:ba:eb:
         9d:dc:97:f1:06:4f:c8:3e:61:49:64:7c:d4:65:99:cc:b1:e4:
         cd:6f:b8:be:43:e4:0b:89:3d:de:0b:3c:b0:cd:8b:2c:82:bd:
         11:61:ab:03:ea:18:13:1c:77:37:41:de:56:ff:10:5b:5a:bc:
         df:39:ce:84:0f:54:da:12:ed:28:54:e3:7e:97:3d:01:58:6a:
         31:0c:ac:3a:a1:70:76:75:c2:f8:bb:8a:1a:9e:cb:8e:62:80:
         e9:8a:ef:98:e5:ad:a3:49:e5:5d:07:c4:a8:2c:b4:8d:27:02:
         90:21:3c:03:7c:fc:4c:35:fc:5d:be:b2:31:f0:cf:5b:52:e3:
         56:80:99:33:79:9a:4e:13:90:b0:65:48:71:d7:48:a7:7e:da:
         32:b6:d0:7f:a6:35:54:36:ad:31:08:09:5f:4b:17:bd:82:3b:
         71:b1:d6:10:d8:27:5f:68:9a:be:88:58:54:49:f3:cb:07:22:
         39:71:ec:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:37:34 2026 by rpki-client